Geneva, 20 March 2007 Second meeting of the FG IdM, Geneva, 23-25 April 2007 Dear Sir/Madam, 1 In agreement with the decisions taken at the first FG IdM meeting (Geneva, 13-16 February 2007), the second meeting of the FG IdM is scheduled to take place at ITU Headquarters, in Geneva, from 23 to 25 April 2007 inclusive. The Terms of Reference for the Focus Group “Identity management” are reproduced in Annex 1. 2 The second FG IdM meeting will be co-located with the 16-27 April 2007 NGN-GSI event (see http://www.itu.int/ITU-T/ngn/index.phtml for details). 3 The items for discussion at the meeting are given in Annex 2. Updates related to the meeting will be made available on the Focus Group web page: http://www.itu.int/itu-t/studygroups/com17/fgidm/index.html. The meeting will open at 09:30 hours on 23 April 2007. Participant registration will begin at 08:30 hours. Please note that all participants must register via the Montbrillant entrance. Detailed information concerning the meeting rooms will be displayed on screens at the entrances to ITU Headquarters. The discussions will be held in English only. All contributions to the meeting should be sent to the following electronic email address: tsbidm@itu.int. It is suggested that inputs to the FG IdM meeting be submitted not later than 16 April 2007. Please note that this is a paperless meeting. 7 Wireless LAN facilities are available for use by delegates in the ITU main conference room areas and in the CICG (Geneva International Conference Centre) building. Wired network access continues to be available in the ITU Montbrillant building. Detailed information is available on the ITU-T website (http://www.itu.int/ITU-T/edh/faqs-support.html). 8 For your convenience, a hotel confirmation form is enclosed as Annex 3 (see http://www.itu.int/travel/accommodations.asp for the list of hotels). Please note that in addition to the NGN-GSI event, a large international exhibition will take place in Geneva on 18-22 April. In order to ensure that hotel rooms are available, we suggest that you make your hotel reservation as soon as possible. 9 In order to enable ITU/TSB to make the necessary arrangements concerning the organization of the meeting, I should be grateful if you would send the registration form in Annex 4, duly completed (one per participant) by fax (No.: +41 22 730 5853), by e-mail (tsbreg@itu.int) or via the on-line form at http://www.itu.int/ITU-T/studygroups/com17/fgidm/index.html, by 9 April 2007. 10 Passports and visas We would remind you that citizens of some countries are required to obtain a visa in order to enter and spend any time in Switzerland. The visa must be requested and obtained from the office Place des Nations CH-1211 Geneva 20 Switzerland Telephone Telefax Gr3: Gr4: +41 22 730 51 11 +41 22 733 72 56 +41 22 730 65 00 Telex 421 000 uit ch Telegram ITU GENEVE E-mail: itumail@itu.int www.itu.int -2- (embassy or consulate) representing Switzerland in your country or, if there is no such office in your country, from the one that is closest to the country of departure. If problems are encountered by ITU Member States, Sector Members or Associates, and at the official request made by them to TSB, ITU can approach the competent Swiss authorities in order to facilitate delivery of the visa. Any such request must specify the name and functions of the individual(s) for whom the visa(s) is/are requested and be accompanied by a copy of the approved registration form for the ITU workshop in question. Please note that the ITU can assist only representatives of ITU Member States, ITU Sector Members or ITU Associates. Annexes: 4 -3- ANNEX 1 ITU-T SG 17 Focus Group “Identity Management” - Terms of Reference 1 Scope The scope of the Focus Group is Identity Management (IdM) for telecommunications/ICT in general; and specifically to facilitate and advance the development of a generic IdM framework and means of discovery of autonomous distributed identities and identity federations and implementations. 2 Objectives The objectives of this Focus Group include preparation of deliverables that include: a) a living list of standards bodies, forums, and consortia dealing with Identity Management, including information concerning their activities and documents in the context of an IdM framework, b) a global analysis on IDM requirements and capabilities, c) a set of IdM telecommunications/ICT use cases that can be used to derive requirements. In carrying out these objectives, the Focus Group may analyze other aspects related to the objectives (e.g., frameworks). The term IdM is understood as "management by providers of trusted attributes of an entity such as a subscriber, a device, or a provider". This is not intended to indicate positive validation of a person. The term of the Focus Group starts from the December 2006 SG 17 meeting and runs to the next meeting of SG 17 September 2007. The Focus Group may be renewed by SG 17. 3 Leadership Chairman: Abbie Barbir (Nortel) Vice-Chairman: Richard Brackney (USA) If needed, after the initial formation of the Focus Group, subsequent management appointments will be made by the Focus Group. The intention is to appoint additional Vice Chairmen from outside the ITU. 4 Participation The Focus Group exists to encourage participation by standard bodies, organizations, developer forums involved in Identity Management worldwide, including institutes, companies, experts and individuals who may not be members of ITU. Participants may include individuals or organizational representatives from ITU Study Groups, JCA-NID, ISO/IEC JTC1/SC27, OASIS, Liberty Alliance, ETSI, Daidalos, Open Group, Shibboleth, OpenID, among others. A list of participants will be maintained and reported to SG 17. 5 Financing The Focus Group will be self-funded by its members. 6 Administrative support The TSB Secretariat will provide TIES support and website capabilities from ITU-T headquarters. -4- 7 Meeting logistics The frequency and location of meetings will be determined by the Focus Group, and preferably will be held in conjunction with SG 17 and SG 13 meetings. Additional virtual and face-to-face meetings may be arranged as needed to progress the work. Electronic document handling will be used. 8 Working language The working language will be English. 9 Technical contributions Any Focus Group member may submit a technical contribution. An electronic submission process will be used. 10 Patent policy The Focus Group will follow the ITU-T patent policy. 11 Deliverables As specified in the Terms of Reference. a) A living list of standards bodies, forums, and consortia dealing with Identity Management, including information concerning their activities and documents in the context of a generic IdM framework; b) A report on a global analysis on IdM requirements and capabilities; c) A report on use case scenarios that can be used to derive requirements for the generic IdM framework; Note: This will not duplicate or compete with the work on RFID/sensor services already in progress in SG13 and currently being coordinated by JCA N-ID. d) A document that develops a generic IdM Framework including generic data models and related schemas; this includes identifying gaps in applicable specifications of standards bodies, forums, and consortia working on identity management; and e) A report on privacy guidelines and best practices; this includes identifying gaps in applicable specifications of standards bodies, forums, and consortia working on identity management. 12 Approval of deliverables The Focus Group will follow a consensus process. 13 Distribution of documentation The Focus Group will communicate via Email and documents will be posted on its ITU-T web site. 14 Working methods The Focus Group will be contribution-driven. It will work electronically, virtual meetings and by face-to-face meetings. Meetings will be held as determined by the Focus Group and will be announced to its participants and on the ITU-T website. 15 Progress reports As required by ITU-T procedures, the Focus Group will provide a written report on its progress to each SG 17 meeting. -5- 16 Announcement of Focus Group formation The formation of the Focus Group will be announced via ITU publications and other means, including communication with other organizations and/or experts, technical journals and the World Wide Web. 17 Methodology The Focus Group will generate a set of output documents (see clause 11). As part of this effort the Focus Group will identify gaps in applicable specifications of standards bodies, forums, and consortia working on identity management and will work with the responsible standards bodies, forums, and consortia to fill identified gaps to enhance the interoperability/interworking of identity management systems of existing and future service domains. The Focus Group should concentrate on technical aspects relevant to the ITU-T and not duplicate work underway in ITU-T Study Groups. 18 Action plan Preparation of the deliverables as specified in the Terms of Reference. 1. Announcement of (through liaisons, announcement by ITU-T, etc.) the Focus Group creation to interested parties (December 2006). 2. Establish the Focus Group structure and additional working group chair positions (February 2007). 3. First meeting Focus Group target February 2007. 4. Produce first draft of Living List (May 2007). 5. Produce first draft of report on a global analysis on IdM requirements and capabilities (June 2007). 6. Produce first draft of report on use case scenarios that can be used to derive requirements for the generic IdM framework (May 2007). 7. Produce first draft of technical document that develops a generic IdM Framework including generic data models and related schemas; this includes identifying gaps in applicable specifications of standards bodies, forums, and consortia working on identity management (July 2007). 8. Produce first draft of report on privacy guidelines and best practices (July 2007). 9. Report to SG 17 (September 2007). 19 Collaboration Collaboration is essential to bring about more effective liaison and information sharing on IdM among diverse telecommunications/ICT and applications experts, and to facilitate the identification and development of IdM requirements and specifications in ITU-T SG 17, SG 13, SG 2 and other Study Groups. The Focus Group will encourage participation in this activity by other standards organizations and development forums involved in Identity Management. As stated before, participation is open to all interested parties. -6- ANNEX 2 List of topics to be addressed by the second meeting (not exhaustive) The ITU-T Focus Group on Identity Management (IdM) invites contributions to progress its work in developing a Global IdM Framework that harmonizes IdM solutions and provides interoperability among the current diverse identity management approaches. Specifically, contributions are invited that are related to the identified priority areas outlined below to provide deliverables pursuant to the Focus Group's revised Terms of Reference (refer to Annex 1). A template for contributions is given at http://www.itu.int/ITU-T/studygroups/com17/fgidm/fgidmtemplate.doc. You are also encouraged to provide at any time informal material to be added to the participant site at www.ituwiki.com. 1. Ecosystem and Lexicon a. Standards bodies, forums and consortia dealing with Identity Management, including activities and reference material with associated URIs. b. Identity Management terms as they are defined and used among these activities, and how they may be applicable to ITU-T IdM work. c. Identify gaps among existing IdM work on terminology. 2. Requirements a. An analysis of needed IdM framework requirements and capabilities associated with the convergence of the user-centric, network-centric, and application-centric approaches to IdM, including: mechanisms for the authoritative discovery and exchange of identity information, including the development and use of assurance metrics; management of entity credentials, identifiers, information attributes & bindings, and identity patterns; interoperability among authorization privilege management, identity providers and provider federations; threats and risks (confidentiality, integrity, availability) associated with IdM capabilities, including means for reducing those risks; b. Applicable normative and informative provisions, including especially those relating to privacy and prevention of identity theft. c. Identify gaps among existing IdM work on requirements. 3. Use Cases a. Telecommunication/ICT use cases, especially those dealing with the convergence of user-centric, network-centric, and application-centric IdM .solutions as well as use cases associated with the discovery and exchange of identity attributes among diverse IdM solutions. b. A structured means to analyse use cases and extract common IdM requirements. 4. Framework a. A functional block diagram of the major components of a Global IdM Framework that includes additional interoperability components needed to discover and exchange identity attributes among diverse IdM solutions. b. Identify gaps among existing IdM work on frameworks. -7- ANNEX 3 This confirmation form should be sent direct to the hotel of your choice INTERNATIONAL TELECOMMUNICATION UNION TELECOMMUNICATION STANDARDIZATION SECTOR 2nd FG IdM Meeting from ------------------------- to ----------------------- in Geneva Confirmation of the reservation made on (date) ------------------------- with (hotel) -------------------------------- at the ITU preferential tariff ------------ single/double room(s) arriving on (date) --------------------------- at (time) ------------- departing on (date) ------------------------------- Family name ------------------------------------------------------------------------------------------------------------------- First name ------------------------------------------------------------------------------------------------------------------ Address ------------------------------------------------------------------------ Tel: ------------------------------- ----------------------------------------------------------------------------------------- Fax: ------------------------------- ----------------------------------------------------------------------------------------- E-mail: ------------------------------ Credit card to guarantee this reservation: AX/VISA/DINERS/EC (or other) ----------------------------------- No. -------------------------------------------------------- Date ------------------------------------------------------ valid until Signature ------------------------------------------------- --------------------------------------------------- -9- ANNEX 4 ITU-TSB Focus Group on Identity Management (FG IdM) (Geneva, 23-25 April 2007) REGISTRATION FORM To be returned to TSB (Fax: +41 22 730 5853 / tsbreg@itu.int) by 9 April 2007 Mr. Mrs. Ms. Miss Administration of ITU Member State ITU-T Sector Member ____________________________________________ Family Name ITU-T Associate ____________________________________________ First Name Others Name and complete address of Administration or Organization: ______________________________________________ Tel: _____________________________________________ ______________________________________________ ______________________________________________ _________________________________________ Fax :_____________________________________________ E-mail : _________________________________________ Important Note: The meetings of the FG IdM will be paperless Hotel : ________________________________________________ Date: ___________________________ Tel. : _______________________________________ Signature: ______________________________________